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Abstract. Explicit equations are given for the elliptic curves (in characteris- 
tic 7^ 2, 3) with mod 2 representation isomorphic to that of a given one. 



1. Introduction 

If N is a positive integer and E is an elliptic curve defined over a field F, one 
can ask for a description of the set of elliptic curves whose mod N representation 
(of the absolute Galois group) is symplectically isomorphic to that of E (see [2]). 
For N — 3, 4, and 5, we gave explicit equations in [3] and [5]. The case TV = 1 
is trivial, and when N > 7 the set in question is always finite and the situation is 
quite different from the ones we consider. In [4] we gave a description for N = 6 
(but did not give explicit equations). 

This note, which can be viewed as a footnote to those papers, deals with the 
easier case N = 2. Note that since there is only one nondegenerate alternating 
pairing on Z/2Z x Z/2Z, isomorphic and symplectically isomorphic are the same 
for mod 2 representations. Theorem 1 gives explicit equations for the family of 
elliptic curves whose mod 2 representation is isomorphic to that of a given one. 
Given two elliptic curves, Corollary 2 gives an easy way to determine whether or 
not their mod 2 representations are isomorphic. The proofs are given in §2. In §3 
we give a different approach, using the algorithm from [3]. 

If F is a field, let F s °p denote a separable closure of F and let G F = Gal(F sc P/F). 
If E is an elliptic curve over F, let j(E) denote its j-invariant, let A(E) denote its 
discriminant, and let E[2] denote the G^-module of 2-torsion points on E. 

Theorem 1. Suppose F is a field of characteristic different from 2 and 3, and 
E : y 2 — x 3 + ax + b is an elliptic curve over F. If u,v £ F, let £ UiV denote the 
curve 

y 2 = x 3 + 3{3av 2 + %uv - a 2 u 2 )x + 27bv 3 - I8a 2 uv 2 - 21abu 2 v - (2a 3 + 27b 2 )u 3 . 

If E' is an elliptic curve over F, and E'[2] = E[2] as Gp-modules, then E' is iso- 
morphic to £ u<v for some u,v G F. Conversely, ifu,vE F and £ u<v is nonsingular, 
then £ UtV [2] = E[2] as Gp-modules, 

,„ , (3av 2 + 9buv — a 2 u 2 ) 3 j(E) , , ,„ . „ fi . , 9 , 

j(£ u>v ) = l -_ 3 , 3x 2 > l\ 2 and A(£ uv ) = 3 6 (v 3 +au 2 v+bu 3 2 A (E . 

Corollary 2. Suppose F is a field of characteristic different from 2 and 3, and 
E : y 2 = x 3 + ax + b is an elliptic curve over F. Let 

(3av 2 + 9buv - a 2 u 2 ) 3 
V ~ 27a 3 (v 3 + au 2 v + bu 3 ) 2 ' 

Suppose E' is an elliptic curve over F. If j(E') ^ 0,1728, and for some (u,v) £ 
P 1 (F) we have 
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3(E) 

j(E') -AC(u,v)a 3 
j(F) - 1728 = 276* ?/ ^°' 
t/ien E'[2] ^ F[2]. Conversely, if E'[2] ^ F[2], tften t/iere is a point (u, v) G P X (F) 
such that j(E') satisfies (i) if a ^ and (ii) if b ^ 0. 

We thank the NSF and NSA for financial support. Silverberg thanks AIM and 
the UC Berkeley math department for their hospitality. 

2. Proofs 

Lemma 3. Suppose F is a field and ip(x) G F[x] is a polynomial with no multiple 
roots. Let <3/ v denote the set of roots of ip. 

(i) There is a Gp-equivariant bijection \f v ^ HornF_ a i go bra(F[2;]/(/(x)), F sop ). 

(ii) The F -algebra of Gp-equivariant maps from ^ v to F scp is isomorphic to 
F[x]/(f(x)). 

Proof. Assertion (i) is clear, and (ii) follows from Lemma 5 on p. A.V.75 of [1]. □ 

Lemma 4. Suppose E : y 2 = f(x) and E' : y 2 = g(x) are elliptic curves over a 
field F with f(x), g(x) G F[x] of degree 3. Then E[2] = E'[2] as Gf -modules if and 
only if F[x]/(f(x)) = F[x]/(g(x)) as F-algebras. 

Proof. We apply Lemma 3 with <p = f and g. Since the roots of / arc the 
^-coordinates of the elements of E[2] — 0, there is a G_F-equi variant bijection 
% ^ E[2]-0. Similarly we have ^ E'[2]-0. Thus by Lemma 3, F[x]/(f(x)) ^ 
F[x]/ (g(x)) as F-algebras if and only if E[2] — = E'[2] — as G^-sets. Since every 
bijection E[2] — ^ E'[2] — extends to a group isomorphism E[2] E'[2], the 
lemma follows. □ 

Proof of Theorem 1. Write f(x) = x 3 + ax + b, so E is the elliptic curve y 2 = f(x), 
and let E' be an elliptic curve y 2 — g(x) = x 3 + ax + (3 with a, [3 G F. 

Suppose E[2] = E'[2] as G_F-modules. By Lemma 4, there is an isomorphism 
of F-algebras <p : F[z]/{g{z)) ^ F[x]/(f(x)). Let <j>(z) = 3ux 2 + 3vx + w with 
u,v,w G F. (The extra factors of 3 remove denominators which would otherwise 
occur in the equation for E u ,v and the formulas below.) The trace of <j>(z) acting by 
multiplication on F[x]/(f(x)) is 3u> — Qau, but the trace of z acting by multiplication 
on F[z]/(g(z)) is zero. Since <fr is an isomorphism, we must have w — 2au. Using 
this, the characteristic polynomial of <f>(z) acting on F[x]/(f(x)) is 

h(T) =T 3 + 3(3av 2 + %uv - a 2 u 2 )T + 27bv 3 - 18a 2 uv 2 - 27abu 2 v - (2a 3 + 27 'b 2 )u 3 . 

Again, since 4> is an isomorphism, we conclude that h(T) = g(T), i.e., E' is £ UtV as 
desired. 

Conversely, suppose that u, v G F are such that 

a = 3(3av 2 + %uv - aV), (3 = 27bv 3 - I8a 2 uv 2 - 27abu 2 v - (2a 3 + 27b 2 )u 3 . 

Then working backwards through the argument above, one can show that the map 
z i ► 3ux 2 + 3vx + 2au induces a homomorphism <fi : F[z]/(g(z)) — > F[x]/(f(x)). 
The determinant of <j> with respect to the bases {l,z,z 2 } and {l,x,x 2 } is 27(v 3 + 
au 2 v + bu 3 ). However, the discriminant of g is 3 6 (4a 3 + 27b 2 )(v 3 + au 2 v + bu 3 ) 2 . 
Since E' is an elliptic curve, the discriminant of g must be nonzero, and hence the 
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determinant of (j> is nonzero so <j> is an isomorphism. By Lemma 4, it follows that 
E[2] ^ E'[2] as G F -modules. 

The formulas for the j-invariant and the discriminant are immediate. □ 

Proof of Corollary 2. If u,v £ F are such that j(E') satisfies (i) or (ii), then £ u>v 
is nonsingular (by the computation of its discriminant in Theorem 1) and j(E') = 
j(£u,v)- If j(E') 7^ 0, 1728, then E' is a quadratic twist of £ u ,v Therefore using 
Theorem 1, we have E'[2] = £ u , v [2] E[2]. Conversely, if E'{2} = E[2], then by 
Theorem 1 we can find u,v € F such that E' = £ u ,v By Theorem 1 we have (i) 
and (ii). □ 

3. A DIFFERENT METHOD 

Applying the method of [3] (see also §3 of [5]) to the case N = 2, one again 
obtains explicit equations for the family of elliptic curves with mod 2 representation 
isomorphic to that of E. We show below how the algorithm works in this case. 
Suppose F is a field with char(F) ^ 2, 3, and E : y 2 = x 3 + ax + b is an elliptic 
curve over F. Note that mod 2 representations do not change under quadratic 
twist. Every elliptic curve E' over F such that the G^-action on E'[2] is trivial is 
a quadratic twist of 

A\ : y 2 = x(x- 1)(jc- A) 
with A € F — {0, 1}. Putting A\ in Weierstrass form we obtain 

E x :y 2 = x 3 + a A (\)x + a 6 (A), 

where 

04(A) = -i(A 2 - A + 1), a«,(A) = -^(2A 3 - 3A 2 - 3A + 2). 

The algorithm in §3 of [3] shows that the equations we are looking for are of the 
form 

(1) dy 2 = x 3 + a(t)x + b(t) 

with 

deF, a(t) = fi- 2 {jt + l) 2 a 4 {A(t)), and b(t) = ^ 3 (jt + l) 3 a 6 (A{t)), 
where w satisfies j(E Uo ) = j(E), fi satisfies 

04(^0) = a M 2 an d a 6 (u a ) = 6/1 3 , 

and 

= at + u 

W 7* + 1 
with a and 7 chosen so that a(t), b(t) E F[i\. 

If ab ^ 0, let j = j(E) and let u be a root of the numerator (as a polynomial 
in A) of 

3 (Ex)- 3 = 

256 - 768A + (1536 - j)X 2 + {2j - 1792)A 3 + (1536 - j)A 4 - 768A 5 + 256A 6 

A 2 (A- l) 2 ' 

Let 

= a 6 (M )a = (2ug - Zul - 3u + 2) a (FSCp] x 
' a 4 (u )b 9(u 2 -u + l)b tl ' ' 
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a _ 3(uo - 2)^ _ 3(2u - l)ft 3 b eFSCp _ 

u (u - 1) ' u {u - 1) 

With these values, equation (1) becomes 

dy 2 = x 3 + a(l + (J - l)t 2 )x + 6(1 + 3* - 3(J - l)t 2 - (J - l)t 3 ), 

where 

j = 3{E) 4a 3 



1728 4a 3 + 27b 2 ' 

For d € F and t G P 1 (i ;l ), this gives the elliptic curves over F with mod 2 repre- 
sentation isomorphic to that of E, when ab ^ 0. 
Similarly, if b = 0, then 

_ = 64(-2 + A) 2 (l + A) 2 (-l + 2A)^ 

V V ; (-1 + A) 2 A 2 

With it = 2, jit = 1/V^a, a = 0, and 7 = 3\/^a, equation (1) becomes 

dy 2 = x 3 + a(l - 3at 2 )x + 2a 2 t(l + at 2 ). 

If a = 0, then 

1 + V^3 -1 6 1/3 (1 - V^3) 1/3 

Mo = ^^< ^ = ^7=1' a = 2 ' and 7 = 5 

yield the equation 

dy 2 = x 3 + 3btx + 6(1 - bt 3 ). 
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